$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa File: 365c666b-c4bc-3afb-83f1-a757b272848e.roa (raw, json) Hash identifier: AJ+Kx1XaJXF2e0FhwzsarGGnafLS5GJPTklw3FQBkUk= Subject key identifier: 1F:62:6B:91:10:35:3B:BA:4D:51:4A:22:07:0E:42:C9:91:9B:45:26 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285845B4E8D45415DBC04A3D858BC0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa Signing time: Mon 29 Apr 2024 13:00:33 +0000 ROA not before: Mon 29 Apr 2024 13:00:33 +0000 ROA not after: Sun 28 Jul 2024 13:00:33 +0000 asID: 10747 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:e8:d4:54:15:db:c0:4a:3d:85:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Apr 29 13:00:33 2024 GMT Not After : Jul 28 13:00:33 2024 GMT Subject: CN=19e4da98-8491-4a08-a1d9-dd6dca11630f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:e2:51:33:2b:d3:24:da:58:57:4e:26:14: b2:ec:a6:e6:cd:45:59:a4:a4:f4:4a:2f:5a:a7:fe: e6:c5:f1:42:9c:5f:a4:6a:6f:55:ce:c6:b4:c2:81: 50:af:67:fa:b2:7b:d3:a4:84:45:30:5f:5d:eb:d8: 55:91:82:e3:7e:4d:da:2e:c0:71:07:fb:e7:93:55: 33:33:76:0c:2c:87:6e:87:e6:1d:ad:fb:20:96:3c: 16:44:7b:40:f5:e5:0c:de:0b:1f:dd:6e:d9:d2:40: 5c:f9:9b:ac:6c:75:e8:e5:e3:9c:06:b5:13:d4:db: 0c:11:e8:55:5f:68:29:df:39:22:57:77:dd:ee:5b: ab:a8:aa:8a:90:9b:37:9a:75:d2:9a:25:eb:92:9a: 84:4f:2c:70:e3:ba:43:99:c6:ab:15:fb:7a:71:f0: 2b:0b:87:75:de:60:7a:2c:ce:a5:96:6f:59:51:39: 31:53:0d:a3:5f:04:9d:3b:6e:58:6c:d7:98:36:30: c5:1d:9f:9b:f7:0e:7b:ad:15:a0:cc:30:50:19:f1: 51:01:38:e2:cf:34:94:12:75:2b:d8:69:d2:49:5f: 9e:d6:69:d5:3b:7f:a0:da:2a:20:05:05:a0:a2:0e: bc:84:56:e9:52:84:eb:9f:ad:c9:9f:cc:74:11:42: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:62:6B:91:10:35:3B:BA:4D:51:4A:22:07:0E:42:C9:91:9B:45:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:23:03:2b:20:a4:c2:4e:fd:a6:30:58:64:e1:0d:c4:a3:0a: 06:64:8a:bf:88:9d:6b:85:d3:65:a8:71:e2:ee:23:1f:b8:d7: f0:4c:b7:e0:2c:1b:5e:ac:3a:bd:66:5b:4c:8c:34:de:75:1a: bd:5b:c5:fe:9f:ba:18:a9:16:c8:52:67:35:e7:27:e9:b7:69: 7d:d8:11:0d:1d:c6:b8:65:72:7d:2a:cf:eb:ca:af:00:05:43: 05:8f:6e:2d:17:1f:42:c7:e5:b9:a5:bc:f6:75:6b:da:c5:1a: bb:11:21:de:65:b6:43:16:60:bf:19:51:6f:ad:30:c4:f2:99: 4f:f7:cc:37:03:6c:50:36:77:c3:1d:f0:7e:84:3b:5b:c6:f9: f6:8f:4f:e3:b8:5a:d0:cf:2a:3d:18:a4:fb:3d:ea:01:55:16: 5b:5f:5d:3c:e1:47:62:a3:ae:ab:bb:1c:75:da:c4:76:fd:e4: 36:87:66:a8:94:e7:77:08:5f:53:29:06:2d:ea:df:13:ba:95: 5e:c4:5d:c1:de:ca:48:74:07:75:1f:59:a8:c7:8c:d8:c3:1b: c7:85:7d:87:51:dc:ff:cb:bb:73:dd:20:05:79:11:c5:3a:7e: 1a:6c:9b:67:60:10:a1:72:16:d9:4c:e3:57:b0:92:0b:b5:5e: b7:c7:a0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW06NRUFdvASj2Fi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk MTllNGRhOTgtODQ5MS00YTA4LWExZDktZGQ2ZGNhMTE2MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuriUTMr0yTaWFdOJhSy7KbmzUVZpKT0Si9a p/7mxfFCnF+kam9Vzsa0woFQr2f6snvTpIRFMF9d69hVkYLjfk3aLsBxB/vnk1Uz M3YMLIduh+YdrfsgljwWRHtA9eUM3gsf3W7Z0kBc+ZusbHXo5eOcBrUT1NsMEehV X2gp3zkiV3fd7lurqKqKkJs3mnXSmiXrkpqETyxw47pDmcarFft6cfArC4d13mB6 LM6llm9ZUTkxUw2jXwSdO25YbNeYNjDFHZ+b9w57rRWgzDBQGfFRATjizzSUEnUr 2GnSSV+e1mnVO3+g2iogBQWgog68hFbpUoTrn63Jn8x0EUL4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9ia5EQNTu6TVFKIgcOQsmRm0UmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMzY1YzY2NmItYzRiYy0z YWZiLTgzZjEtYTc1N2IyNzI4NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0jAysgpMJO/aYwWGThDcSjCgZkir+InWuF02WoceLuIx+41/BMt+As G16sOr1mW0yMNN51Gr1bxf6fuhipFshSZzXnJ+m3aX3YEQ0dxrhlcn0qz+vKrwAF QwWPbi0XH0LH5bmlvPZ1a9rFGrsRId5ltkMWYL8ZUW+tMMTymU/3zDcDbFA2d8Md 8H6EO1vG+faPT+O4WtDPKj0YpPs96gFVFltfXTzhR2Kjrqu7HHXaxHb95DaHZqiU 53cIX1MpBi3q3xO6lV7EXcHeykh0B3UfWajHjNjDG8eFfYdR3P/Lu3PdIAV5EcU6 fhpsm2dgEKFyFtlM41ewkgu1XrfHoCk= -----END CERTIFICATE-----Generated at Tue May 21 07:21:09 2024 by rpki-client on console-ams.rpki-client.org